Last updated: 7 September 2026
Zestrek is operated by Ice Cube Technology LLC, a California limited liability company ("we," "us"). This policy explains what Zestrek collects, why, who else sees it, and what control you have.

Privacy Policy

What we collect

❋ Your account

Your email address, your password, and — if you choose to give it — your name. We store the password only as a cryptographic hash, so we never have access to the password itself.

❋ Your conversations with the AI

The messages you exchange with Zestrek's planning assistant, retained so a conversation can be resumed.

❋ Your trips

Destinations, dates, and the day-by-day activities in your itineraries, including place names and their geographic coordinates, times, notes, and booking references. If you plan a trip with others, trip members can see the trip content you've shared with them.

❋ Your travel preferences

What you tell us when setting up your profile: travel style, home airport, interests, preferred airlines and hotel chains, and luggage preference. This also includes dietary restrictions and accessibility needs, which you may consider sensitive — we collect them only to make trip suggestions useful, and only if you choose to provide them. You can edit or clear any of these at any time.

❋ Documents you upload

If you use the Travel Docs Vault, the files you add and their type — which may include passports, visas, insurance documents, vaccination records, and other government identification. You choose what to upload. Documents are private to you unless you explicitly share one with members of a specific trip.

❋ Expenses you record

Amounts, currency, descriptions, and how a cost is split between trip members. Zestrek does not process payments and never sees card or bank details.

❋ Errors and crashes

Diagnostic information when the app fails, so we can fix it: what went wrong, where in the app or API it happened, and the app version. These reports exclude your IP address, your name, your email address and your account identifier. We also strip the contents of the request that failed — so an error while saving a document records that a save failed and which document it concerned, never the document itself or what you typed. We do not collect performance or usage measurements, and we never record your screen.
* Zestrek does not collect contacts, browsing history, advertising identifiers, or your device's background location.

Why we collect it

To create and secure your account; to generate and refine trip plans; to store and return the documents you save; to share trip content with people you've invited; and to diagnose problems.
We do not sell your information. We do not share it with advertisers. We do not track you across other apps or websites.

Who else processes your data

Zestrek relies on a small number of service providers. Each processes data only to provide its service to us:
  • Anthropic — your conversations with the AI, and the trip and preference details needed to answer them
  • Amazon Web Services — the documents you upload
  • Railway — application hosting, database, and job queue, where all other data lives
  • Sentry — error and crash diagnostics, stripped of request contents and of anything identifying you
We may disclose information if required by law, or to protect the rights and safety of our users.

How we protect it

Passwords are hashed, never stored in readable form. Access to the API requires an authenticated session. Documents are encrypted at rest in storage, and are retrieved through short-lived links that expire after fifteen minutes — files are never publicly readable. No system is perfectly secure, and we can't guarantee absolute security.

How long we keep it

❋ Access and correction

You can view and edit your profile, trips, documents, and expenses in the app at any time.

❋ Deletion

You can delete individual trips, documents, and activities in the app. You can also delete your entire account from Settings. Deletion is immediate and permanent — your profile, conversations, documents and personal trips are removed, and the files behind them are deleted from storage. There is no recovery, and we do not keep a copy. One exception, so it isn't a surprise: if you organise a trip that other people have joined, that trip is passed to another traveller on it rather than deleted, so your fellow travellers don't lose a shared itinerary because you left. Your own contributions to it — your documents, your expenses, and any activity you kept private — are still removed. Before you confirm, the app tells you exactly which trips will be deleted and which will be passed on, and to whom.

❋ California residents

Under the CCPA you have the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising those rights. We do not sell personal information. Contact us at hello@zestrek.com to make a request.

Children

Zestrek is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us information, contact us and we will delete it.

Changes

If we make material changes to this policy, we'll update the date above and, where appropriate, notify you in the app.

Contact

Ice Cube Technology LLC: hello@zestrek.com
We keep your information for as long as your account exists. Deleting a trip removes it from your account; deleting your account removes your personal data as described below.

Your choices and rights